Program Manager - Enterprise Risk Management (ERM) & Business Continuity Planning (BCP)

Job description

We need people from manufacturing background Role Purpose The Program Manager will establish the end-to-end ERM and BCP architecture for Tata Electronics and lead phased rollout across semiconductor manufacturing, OSAT, EMS, corporate functions, and support organizations. The role will create the governance model, standards, methods, templates, training approach, testing regime, and performance review cadence required to make business continuity a managed capability rather than a one-time project. The role will also serve as the central integrator across Operations, Supply Chain, Quality, EHS, Facilities, IT, Information Security, HR, Finance, Legal, and site leadership to ensure continuity obligations are owned locally and governed centrally. Key Responsibilities 1. Build the enterprise ERM/BCP framework • Design and deploy the enterprise ERM/BCP framework, policy structure, governance model, standards, procedures, templates, and review mechanisms for all Tata Electronics entities and sites. • Define the minimum continuity architecture required at enterprise, business, function, department, and site level, including risk assessment, business impact analysis, recovery strategies, crisis management, plan documentation, testing, training, and annual refresh cycles. • Establish a common methodology for risk identification, prioritization, treatment, and monitoring using fit-for-purpose approaches such as FMEA, risk registers, dependency mapping, scenario analysis, and control plans. 2. Drive execution through assigned owners across the organization • Create and operationalize a federated delivery model with named BCP coordinators, function representatives, department continuity owners, and site taskforce leads across each business and manufacturing location. • Drive implementation through these assignees by issuing charters, RACI structures, milestone plans, workshop calendars, templates, and closure trackers, while holding owners accountable for quality and timeliness of deliverables. • Chair or coordinate recurring review forums with business and function assignees to monitor readiness, action closure, overdue items, testing progress, risk escalation, and management reporting. • Ensure every critical process has an identified owner, alternate owner, documented recovery requirements, upstream and downstream dependency mapping, and current continuity actions. 3. Lead risk assessment and business impact analysis • Direct organization-wide risk assessments covering operational, supply chain, facility, utility, EHS, cyber, information security, logistics, quality, workforce, and external ecosystem risks relevant to semiconductor manufacturing. • Lead business impact analysis with function owners to identify critical products, processes, assets, infrastructure, information, skills, suppliers, and services; define impact tolerances; and determine RTO, RPO, MTPD, and minimum resource requirements where relevant. • Consolidate departmental outputs into enterprise views for prioritization, management review, and investment decisions. 4. Develop and institutionalize recovery and crisis capabilities • Build recovery strategies for priority scenarios such as utility outages, equipment failures, cleanroom incidents, chemical events, IT disruptions, cyber incidents, supplier failures, logistics interruptions, natural disasters, labor shortages, and infrastructure breakdowns. • Define crisis management structures, escalation criteria, notification protocols, communication flows, command-center practices, and decision rights for enterprise, business, and site incidents. • Ensure continuity plans are practical, role-based, version-controlled, and linked to trigger conditions, response actions, recovery steps, communication paths, and restart criteria. 5. Build certification and audit readiness • Translate continuity and risk requirements into management-system-ready processes and records that support ISO 9001 risk-based thinking, IATF 16949 contingency planning, ISO 27001 information security during disruption, and ICT readiness during disruption. • Partner with Quality, Information Security, and Compliance teams to map BCP controls to clause requirements, create evidence repositories, define ownership of mandatory records, and prepare internal teams for audits and customer assessments. • Establish a documented evidence trail for reviews, exercises, risk assessments, contingency plans, communication logs, corrective actions, plan updates, and management review inputs. • Support audit responses, nonconformity closure, and remediation planning related to continuity, contingency, and resilience requirements. 6. Build testing, exercising, and readiness assurance • Create an annual continuity exercise program that includes tabletop exercises, functional drills, site simulations, cyber-disruption scenarios, supplier disruption scenarios, and post-event reviews. • Define testing coverage, pass/fail criteria, observation methods, issue logging, CAPA tracking, and retest requirements to demonstrate plan effectiveness. • Establish readiness dashboards and KPI/KRI mechanisms for plan completion, exercise closure, overdue actions, recovery capability, risk heat maps, supplier dependency coverage, and training completion. 7. Integrate supply chain, IT, and manufacturing continuity • Work with Supply Chain and Procurement teams to assess critical supplier resilience, alternate source strategies, logistics contingencies, inventory buffers, and communication protocols for supply continuity. • Coordinate with IT and Information Security to align enterprise BCP with disaster recovery, cyber response, backup, access recovery, application recovery, and information security continuity requirements. • Partner with Facilities, EHS, Manufacturing, Engineering, and Quality to ensure continuity strategies reflect fab realities such as utilities, contamination control, proces